How to connect a firewall to the network without bypassing a router

[sarath10]

Im using a firewall(cyberoam),i need to connect the firewall to my network without neglecting the router for monitoring my network.

 

[Someone Somewhere]

Normally you would connect it between the router and the modem/ONT/demarc.

 

[bill001g]

I have not seen that brand but it does appear to compete with other commercial firewalls. It should have the ability to run in bridge/transparent mode. When it runs like this it looks like a switch.

I suspect the main problem you will have is the NAT assuming you are talking about using this on the internet and not say between a server farm and your lan.

Lets say you do
Modem----firewall---router.

If you run the firewall in transparent mode it will leave the router doing all the work. Problem is all traffic now appears to come from the router you can not see the actual end devices because the router has NATed the ip to it one WAN ip.

If you run the firewall in router mode then you really don't need your router for much. The firewall will do the nat in this case and the router does almost nothing.

If you run

modem-router-fw

If you run transparent mode this will work fine for wired connections. Problem is I suspect your router has wireless ports which would bypass the firewall.

I would suggest in effect removing your router and letting the firewall be the router. You would use your router as a AP just to provide wireless services.

Modem---fw(running nat)----router(in AP mode).

These are some of the simpler options. It really depends why you have the firewall. Most people are using it to provide multiple zones to protect different groups of data. This gets a lot more complex to get correctly installed.

 

[noidea_77]

depends a bit on the exact model of the firewall and what the firewall should do. Do you need it only between the clients and the internet or between clients as well? the easy way is to connect the router to one port of the firewall and the clients or switches to the other ports.

 

[sarath10]

depends a bit on the exact model of the firewall and what the firewall should do. Do you need it only between the clients and the internet or between clients as well? the easy way is to connect the router to one port of the firewall and the clients or switches to the other ports.

i just want the firewall between clients,is it possible ?if possible Kindly do help me to connect it,i need to monitor and need to set rules in my network

 

[sarath10]

I have not seen that brand but it does appear to compete with other commercial firewalls. It should have the ability to run in bridge/transparent mode. When it runs like this it looks like a switch.

I suspect the main problem you will have is the NAT assuming you are talking about using this on the internet and not say between a server farm and your lan.

Lets say you do
Modem----firewall---router.

If you run the firewall in transparent mode it will leave the router doing all the work. Problem is all traffic now appears to come from the router you can not see the actual end devices because the router has NATed the ip to it one WAN ip.

If you run the firewall in router mode then you really don't need your router for much. The firewall will do the nat in this case and the router does almost nothing.

If you run

modem-router-fw

If you run transparent mode this will work fine for wired connections. Problem is I suspect your router has wireless ports which would bypass the firewall.

I would suggest in effect removing your router and letting the firewall be the router. You would use your router as a AP just to provide wireless services.

Modem---fw(running nat)----router(in AP mode).

These are some of the simpler options. It really depends why you have the firewall. Most people are using it to provide multiple zones to protect different groups of data. This gets a lot more complex to get correctly installed.

We are not using modem in our network, Wireless receiver and from that receiver to router.

 

[sarath10]

Normally you would connect it between the router and the modem/ONT/demarc.

There is no other way to connect it?

 

[Someone Somewhere]

Your wireless receiver takes the place of a modem.

As above though, it should be between the router and the rest of the network if you want to see whose traffic is causing the warnings. Note that this won't work if you're using WiFi in your router.

 

[noidea_77]

depends a bit on the exact model of the firewall and what the firewall should do. Do you need it only between the clients and the internet or between clients as well? the easy way is to connect the router to one port of the firewall and the clients or switches to the other ports.

i just want the firewall between clients,is it possible ?if possible Kindly do help me to connect it,i need to monitor and need to set rules in my network

Please post the exact model you own. Do you have enough ports at the firewall to connect all clients?